Spark the future.

May 4 – 8, 2015Chicago, IL

Getting Ready for Windows 10: Servicing Windows Client and Server in a Managed Environment Today Thierry PaquayJohan Arwidmark

BRK2321

A new dialog about managing Windows Updates with YOU

http://blogs.windows.com/itpro/

Agenda

Update Types and RecommendationsSecurityHotfixesRollups

Management Tool Best PracticesWSUSSCCM

Agenda

Update Types and RecommendationsSecurityHotfixesRollups

Management Tool Best PracticesWSUSSCCM

“The [malware] sample with the Sony computer names in it was designed to systematically connect to each server on the list. ‘It contains a user name and password and a list of internal systems and it connects to each of them and wipes the hard drives.”

Jaime Blasco, AlienVault

Sony Got Hacked Hard: What We Know and Don’t Know So FarKIM ZETTER Wired

December 2, 2014

Source: Sony Got Hacked Hard: What We Know and Don’t Know So Far, Kim Zetter, Wired Magazine, December 3, 2014

Sony Breach – Extraordinary Damage

Tension remains between Quality and Security

DVD

ParallelAgili

Security risk keeps increasing in scope and impact

PCMCIA

Quality of Security Updates

Deploy security updates as soon as possible

87%of Updates are successful

Agenda

Update Types and RecommendationsSecurityHotfixesRollups

Management Tool Best PracticesWSUSSCCM

Reasons to deployFully tested monthly against hundreds of thousands of apps and hardware configurations

Solve problems that are really bad and don’t want to wait for

Windows 8.1/Server 2012R2: you have been deploying them anyway as part of regular updates

Some problems should never happen to you

Deploy Hotfixes proactively

Agenda

Update Types and RecommendationsSecurityHotfixesRollups

Management Tool Best PracticesWSUSSCCM

Windows Update Journey

Recommended Update Rollups

Recommended Single Updates

Optional Updates

Convenience Rollups

Microsoft WU/WSUS

Engineer the fix

Regression Test

Compatibility Test

Optional Update Enterprise Feedback?

KB3013531 is being validated

Also Available in WSUS “Updates” Classification

If no problem, it will become “Important” in May

Help us validate Optional Windows Updates

Deploy Windows Updates Proactively

KB3042085, KB3044374 and KB3048778 caused no problem in March: They are ready to install/deploy

Available in WSUS “Critical Updates” Classification

Deploy proactively after validation

Deploy Windows Update Rollups Proactively

Groups of updates in single package and single reboot event

Windows 7/Server 2008R2 Networking Update Rollup

1. 90 hotfixes included

2. Networking focus: WebDAV, DFSN, SMB, MUP, CSC, etc

3. Single installation and reboot

4. Importable into WSUS from catalog

New Features

Mouse and keyboard functionality (e.g. Minimize/Close, tile context menu, etc)

Internet Explorer 8 emulation mode in Internet Explorer 11

Improved portrait-first device experiences

The April 2014 Update Rollup

Bug Fixes

108Resolved

Regressions

10

Windows 8.1 WU/WSUS ISO Images

Windows Server 2012R2 WU/WSUS ISO Images

The August 2014 Update Rollup

New Features

Precision touchpad improvements

Wi-Fi Direct APIs for Discoverability

Video capture metadata for MP4

Minimized Logon Prompts for Microsoft SharePoint Online

Bug Fixes

24Resolved

Regressions

2

Windows 8.1 WU/WSUS ISO Images

Windows Server 2012R2 WU/WSUS ISO Images

The November 2014 Update Rollup

New Features

Defense-in-depth security for IE

Improved manageability with DSC, SIL and Powershell

Refreshed language packs

Support for newer hardware (boot order, SD card, USB debugging)

Improved Web Services for Devices (WSD) printer support

Bug Fixes

66Resolved

Regressions

2

Windows 8.1 WU/WSUS ISO Images

Windows Server 2012R2 WU/WSUS ISO Images

Windows Update Journey

Recommended Update Rollups

Recommended Single Updates

Optional Updates

Convenience Rollups

Microsoft WU/WSUS

Engineer the fix

Regression Test

Compatibility Test

Deploy Proactivel

y

Validate Monthly

Update your

baseline

Agenda

Update Types and RecommendationsSecurityHotfixesRollups

Management Tool Best PracticesWSUSSCCM

Agenda

Update Types and RecommendationsSecurity - deployHotfixes - deploy proactivelyRollups - validate and deploy

Management Tool Best PracticesUse smart groupingsUse classifications as intended

Demo

Johan Arwidmark, Chief Technical ArchitectKnowledge Factory

Visit Myignite at http://myignite.microsoft.com or download and use the Ignite Mobile App with the QR code above.

Please evaluate this sessionYour feedback is important to us!

© 2015 Microsoft Corporation. All rights reserved.